Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2022-0861

ePO XML extended entity vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator attacker to upload a malicious XML file through the extension import functionality. The impact is limited to some access to confidential information and some ability to alter data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee,LLC McAfee ePolicy Orchestrator (ePO)

  • unspecified to < 5.10 CU 13affected

References